$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4457acf9-1576-3482-a1c8-00949efadb0d.roa File: 4457acf9-1576-3482-a1c8-00949efadb0d.roa (raw, json) Hash identifier: amhFmnFpvMCEHmIFShS2qCZEYhUYbqIGFsfog7/4COY= Subject key identifier: F3:A2:4F:D4:A7:F0:DD:F6:1A:1E:1A:2E:71:A7:25:C0:F9:06:C6:65 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553332ABCA3953ADF4FBCAE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4457acf9-1576-3482-a1c8-00949efadb0d.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 216.172.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:2a:bc:a3:95:3a:df:4f:bc:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=a4f79e0d-ef00-4948-a721-8422b1ed2dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:0f:ce:6a:05:6f:84:3b:2c:1a:34:c0:46: 2c:54:43:d9:2c:82:e4:0b:43:2a:2b:1a:3a:aa:ec: 6c:11:9e:a2:c7:78:7b:b6:b8:30:98:b0:f9:1f:29: 40:14:0e:e8:2b:1c:1c:41:9b:b3:73:a9:44:52:89: 5e:dd:c4:7d:7f:e7:b1:b0:4a:aa:15:6f:1c:dd:7d: 16:6a:25:42:a1:48:c3:96:c2:53:6c:20:d9:3c:24: 32:f1:86:2d:bd:ee:f5:79:ac:ae:6f:d0:b9:31:d4: fe:9b:d6:aa:3c:75:b3:69:50:37:1c:fc:6f:8f:b1: 55:02:2f:96:f2:8c:bc:3b:9d:58:da:2b:18:32:8d: 2e:9d:75:4b:69:48:98:2e:f8:6b:60:de:c2:c9:f6: 3d:af:c5:07:17:80:da:26:a0:d0:6c:63:a4:ba:a9: b6:ac:e8:75:06:1a:c9:72:14:08:37:3f:c8:22:c3: 5a:27:47:0c:a0:26:4e:75:63:2b:f1:f2:c2:71:09: 4f:a8:72:2a:22:01:89:3a:c4:66:40:3d:30:95:ef: 66:82:24:69:8c:1e:ec:73:b2:0e:cb:6a:12:2e:69: 98:ac:24:17:b8:01:5d:40:38:39:de:fa:61:60:01: 64:12:6e:3e:5e:c1:57:05:b7:9c:46:02:75:92:55: 73:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A2:4F:D4:A7:F0:DD:F6:1A:1E:1A:2E:71:A7:25:C0:F9:06:C6:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4457acf9-1576-3482-a1c8-00949efadb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.172.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:98:05:99:4c:33:31:fe:4c:72:c0:54:28:aa:de:90:3d:99: af:96:5d:f0:43:9f:cb:f2:58:a3:a6:60:32:74:1e:d8:8e:b3: a0:1e:4c:d5:de:99:a2:05:f7:44:3d:43:a2:d8:b9:05:9c:27: 5f:78:53:9c:c4:65:f0:10:be:5a:97:23:7f:fc:b3:7a:09:a7: 87:7a:85:e1:a4:a2:eb:36:9d:5b:73:5d:00:3a:e9:21:92:16: 0a:bc:d6:8a:0a:81:c6:e3:59:95:c8:27:c9:e8:69:e6:ca:c3: f9:2f:4d:8a:12:c3:32:b3:8f:b9:71:71:f0:1d:bf:03:35:3f: 89:6a:92:ca:8b:43:b6:4b:6c:99:64:84:49:b5:ee:77:c4:dd: 5c:34:96:f6:c0:8f:73:a4:2f:06:52:30:c5:dc:31:6e:97:59: 78:47:ed:50:02:0d:70:ca:98:39:99:36:09:e7:0e:7b:68:71: ef:7d:50:07:5a:18:5b:1c:e7:3e:d2:d2:e8:1f:4d:d7:94:f8: 9a:7f:16:ce:b7:6f:85:72:14:d1:11:25:6c:ac:54:3e:0d:7c: be:1b:6f:8b:9f:9d:67:4a:4d:cc:02:56:a2:2f:e3:e0:a2:ea: d3:2d:de:b6:7e:2d:81:c3:5a:b2:e8:3e:24:f4:b1:c1:38:1e: c1:27:2b:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMyq8o5U630+8rgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk YTRmNzllMGQtZWYwMC00OTQ4LWE3MjEtODQyMmIxZWQyZGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraEPzmoFb4Q7LBo0wEYsVEPZLILkC0MqKxo6 quxsEZ6ix3h7trgwmLD5HylAFA7oKxwcQZuzc6lEUole3cR9f+exsEqqFW8c3X0W aiVCoUjDlsJTbCDZPCQy8YYtve71eayub9C5MdT+m9aqPHWzaVA3HPxvj7FVAi+W 8oy8O51Y2isYMo0unXVLaUiYLvhrYN7CyfY9r8UHF4DaJqDQbGOkuqm2rOh1BhrJ chQINz/IIsNaJ0cMoCZOdWMr8fLCcQlPqHIqIgGJOsRmQD0wle9mgiRpjB7sc7IO y2oSLmmYrCQXuAFdQDg53vphYAFkEm4+XsFXBbecRgJ1klVzwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOiT9Sn8N32Gh4aLnGnJcD5BsZlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDQ1N2FjZjktMTU3Ni0z NDgyLWExYzgtMDA5NDllZmFkYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2KwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSYBZlMMzH+THLAVCiq3pA9ma+WXfBDn8vyWKOmYDJ0HtiOs6AeTNXe maIF90Q9Q6LYuQWcJ194U5zEZfAQvlqXI3/8s3oJp4d6heGkous2nVtzXQA66SGS Fgq81ooKgcbjWZXIJ8noaebKw/kvTYoSwzKzj7lxcfAdvwM1P4lqksqLQ7ZLbJlk hEm17nfE3Vw0lvbAj3OkLwZSMMXcMW6XWXhH7VACDXDKmDmZNgnnDntoce99UAda GFsc5z7S0ugfTdeU+Jp/Fs63b4VyFNERJWysVD4NfL4bb4ufnWdKTcwCVqIv4+Ci 6tMt3rZ+LYHDWrLoPiT0scE4HsEnKxk= -----END CERTIFICATE-----Generated at Thu May 23 02:53:59 2024 by rpki-client on console-ams.rpki-client.org